Class: ActionDispatch::ContentSecurityPolicy
- Inherits:
-
Object
- Object
- ActionDispatch::ContentSecurityPolicy
show all
- Defined in:
- lib/action_dispatch/http/content_security_policy.rb
Defined Under Namespace
Modules: Request
Classes: Middleware
Instance Attribute Summary collapse
Instance Method Summary
collapse
Constructor Details
Returns a new instance of ContentSecurityPolicy.
155
156
157
158
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 155
def initialize
@directives = {}
yield self if block_given?
end
|
Instance Attribute Details
#directives ⇒ Object
Returns the value of attribute directives.
153
154
155
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 153
def directives
@directives
end
|
Instance Method Details
#block_all_mixed_content(enabled = true) ⇒ Object
174
175
176
177
178
179
180
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 174
def block_all_mixed_content(enabled = true)
if enabled
@directives["block-all-mixed-content"] = true
else
@directives.delete("block-all-mixed-content")
end
end
|
#build(context = nil, nonce = nil, nonce_directives = nil) ⇒ Object
220
221
222
223
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 220
def build(context = nil, nonce = nil, nonce_directives = nil)
nonce_directives = DEFAULT_NONCE_DIRECTIVES if nonce_directives.nil?
build_directives(context, nonce, nonce_directives).compact.join("; ")
end
|
#initialize_copy(other) ⇒ Object
160
161
162
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 160
def initialize_copy(other)
@directives = other.directives.deep_dup
end
|
#plugin_types(*types) ⇒ Object
182
183
184
185
186
187
188
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 182
def plugin_types(*types)
if types.first
@directives["plugin-types"] = types
else
@directives.delete("plugin-types")
end
end
|
#report_uri(uri) ⇒ Object
190
191
192
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 190
def report_uri(uri)
@directives["report-uri"] = [uri]
end
|
#require_sri_for(*types) ⇒ Object
194
195
196
197
198
199
200
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 194
def require_sri_for(*types)
if types.first
@directives["require-sri-for"] = types
else
@directives.delete("require-sri-for")
end
end
|
#sandbox(*values) ⇒ Object
202
203
204
205
206
207
208
209
210
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 202
def sandbox(*values)
if values.empty?
@directives["sandbox"] = true
elsif values.first
@directives["sandbox"] = values
else
@directives.delete("sandbox")
end
end
|
#upgrade_insecure_requests(enabled = true) ⇒ Object
212
213
214
215
216
217
218
|
# File 'lib/action_dispatch/http/content_security_policy.rb', line 212
def upgrade_insecure_requests(enabled = true)
if enabled
@directives["upgrade-insecure-requests"] = true
else
@directives.delete("upgrade-insecure-requests")
end
end
|